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Quantum information theory establishes the ultimate limits on communication and cryptography 
in terms of channel capacities for various types of information. The private capacity is particularly 
important because it quantifies achievable rates of quantum key distribution. We study the power 
of quantum channels with limited private capacity, focusing on channels that dephase in random 
bases. These display extensive nonadditivity of private capacity: a channel with 21ogd input qubits 
has a private capacity less than 2, but when used together with a second channel with zero private 
capacity the joint capacity jumps to (1/2) log d. In contrast to earlier work which found nonadditivity 
vanishing as a fraction of input size or conditional on unproven mathematical assumptions, this 
provides a natural setting manifesting nonadditivity of privacy of the strongest possible sort. 



Introduction — Communication channels are subject to 
interference and noise, even under the best operating 
conditions. By modehng noise probabihstically, infor- 
mation theory characterizes the fundamental limitations 
for communication in terms of the capacity of a chan- 
nel [1]. The capacity, measured in bits per channel use, 
establishes the boundary between communication rates 
that are achievable in principle and those that aren't. 
Furthermore, there is a simple formula for the capacity, 
which can provide insight for designing practical proto- 
cols and give explicit bounds on the performance of real- 
world systems P]. 

While a probabilistic description of noise is often a 
good approximation, ultimately all communication sys- 
tems are fundamentally quantum. Furthermore, in the 
regime where quantum effects become important there 
are several distinct notions of information transmission. 
One may be interested in the capacity of a channel for 
classical, private, or quantum transmission. The sender 
and receiver may have access to some auxiliary resources, 
such as entanglement or classical communication. The 
simplest case which involves no such assistance will be 
the focus of this letter. 

The capacity of a channel for private classical com- 
munication [3] is of particular importance because of 
its relation to quantum key distribution |4]. The pri- 
vate capacity of a quantum channel J\f is usually called 
P{Af), and is no larger than the classical capacity, C{J\f). 
Since fully quantum transmission is necessarily private, 
the private capacity of a channel is at least as large 
as its quantum capacity, Q{J\f). As a result, we have 
Q{Af) < V{N) < C{M). In contrast to the classical 
capacity of a classical channel, no simple expression is 
known for any of these three capacities of a quantum 
channel. In fact, it is known that the natural guesses for 
Q, V, and C are simply false |3 El [!]• As a result, very 
little has been known about the capacities of a quantum 
channel. 

Lately there have been some surprising discoveries 
about the additivity properties of quantum capacities 
[H H Uni H m ESI- a function on channels is called 



additive if its value on the tensor product of two chan- 
nels is equal to the sum of the value on the individual 
channels: f{N(S>M) = f{M) + !{M). Additivity of a 
capacity means that the communication capabilities of 
channels don't interact when you use them together — a 
channel is good for the same amount of communication 
no matter what other channels are available. Conversely, 
when a capacity is nonadditive it means that the value 
of a channel for communication depends on what other 
channels it might be used with. It was found in [TU] that 
the quantum capacity is strongly nonadditive. In fact, 
there are pairs of channels with Q{M) — Q{M) — but 
Q{N ® M.) > 0. Something similar was found for the 
private capacity in jl3j . where channels were presented 
with ViAf) = and ViM) « 1 but V{J\f(g)M) » 1. So, 
it appears that the communication value of a quantum 
channel is not a simple function of the channel itself but 
also of the context in which it is used. 

In this paper we present a family of channels displaying 
extensive nonadditivity of private capacity, meaning ad- 
ditivity violations proportional to the input size. This in- 
volves two crucial innovations over previous work. First, 
our channels are much simpler than those of [TTJ |T3] and 
|13j and do not rely on an assumption of additivity of 
Holevo information as in [TTl [14]. Second, while it was 
shown in [13j that V is not additive, the violation is a van- 
ishingly small fraction of the channel's input size. Our 
work shows additivity violation of the strongest possi- 
ble sort, with violations proportional to the log of the 
input dimension. Since logD is the largest possible ca- 
pacity (classical or quantum) for a channel with input 
dimension D, and thus the natural scale of the capac- 
ity, violations of this sort show that nonadditivity is an 
essential feature of the private capacity. 

Random Phase Coupling Channels — The channels we 
will focus on are pictured in FIG. [T] TZd has two d- 
dimensional inputs, Ai and A2. After local random uni- 
taries U and V are applied individually to these inputs, 
a controlled phase is applied and A2 is discarded. In ad- 
dition to receiving the Ai system (now relabeled B), the 
receiver is given a classical register describing which U 
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and V were chosen. 

More formally, we let Wjjv — PU ® V, where 
P — X^i j ^'"'l*)(*Ui ® Ij)(jU2 is the controlled phase 
gate on A1A2 and w is a primitive dth root of 
unity. Note that Wuv niaps A1A2 to BE. We let 
T^uv{4>) — Tr^ Wuvfj^W^y, and define our channel TZd = 
Eu,vTZuv(^\U){U\(^\V){V\, where Euy is the expectation 
with respect to random variables U and V. Throughout 
we will let C/" = C/i (8) . . . (8) [/„ and similarly for V, and 
define TZu^V"- = T^UiVi ® ■ • • (8) Ti-u^v^ ■ 
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FIG. 1: Random Phase Coupling Channel. Unknown ran- 
domly chosen unitaries are applied independently to Ai and 
A2. A controlled phase is then applied to between and A2, 
which we now relabel B and E, respectively. The E system 
is traced out, while the B system is delivered to the receiver 
together with a classical description of the unitaries U and V. 

A key feature of our channel TZd is that the unitaries 
U and V are unknown to the sender. If she were told V 
before using the channel, she would be able to carefully 
choose the input to A2 so as to avoid any dephasing of 
Ai. However, since she does not, she is unable to avoid 
choosing an input that results in a significant amount 
of dephasing when averaged over the choice of V. This 
rules out much quantum capacity. If at least she knew 
U in advance, she'd still be able to send classical mes- 
sages in the basis of dephasing, but since the dephasing 
is in a random basis, known only to the receiver even the 
classical capacity of the channel is low. 

However, when entanglement between sender and re- 
ceiver is available, things change dramatically. We will 
see below that by having the sender feed half of a max- 
imally entangled pair into the A2 system, the other half 
sitting with the receiver, the channel can transmit quan- 
tum information at a rate of log d. Since quantum com- 
munication is necessarily private, private communication 
is also possible at this rate. We will be able to use this 
property, together with the probabilistic entanglement 
provided by a 50% erasure channel, A^, which itself has 
zero private capacity, to show that TZd ® A'^ has a quan- 
tum capacity of at least (1/2) log d, even though the in- 



dividual private capacities are much smaller. 

Small Classical Capacity — Our goal now is to show 
that TZd has a small classical capacity — C{TZd) < 2. To 
do this, we first have to review some well known facts. 

For an ensemble £ — {pi,(j)i}, we define the Holevo 
information [IF 

i 

where pi = 7V(0i) and p = J^iPiPi^ S{p) = -Trplogp, 
and throughout logarithms will be taken base two. The 
classical capacity of a quantum channel is given as follows 
Hi HI]: 

C(Af) = lim - maxx (AA®",5) . (1) 

Our main technical result is the following lemma, 
whose proof may be skipped on a first reading. 
Lemma 1 Let pu^v^ = TZu^v^iipA'^A^)- Then for d > 9 

Eu^v^S{pu^v^)>n{logd-2). 

Proof First note that ES{pu^v^) > ^ log E Tr p^„y„ , so 
it will suffice to give an upper bound on E Tr pfjnyn- To 
do this, we'll use the fact that 

Tr (pfj^y.) - Tr(p^:;,„ ^ p^lV"^i3"S"') 

where Fgngin is the unitary that swaps B" and 
B'". In particular, letting X = {P^® P^) Fb^b'^ ® 
Ie" _b'" {Pn d) Pn) we find that 

ETr(p2,„^„)-Tr(vI/X) 

where ^' = EU'^B'®yEE'i'A",A^®^A"iA'^U^'lB'®y^lsE' 
with V^g, = <^f^i{Ui «) Ui), similarly for Vg^, and P„ = 
p(gin fa,ct, we won't even need to calculate ^' exactly, 
since by Schur's Lemma [18' it takes the form 



as 



TjBB' ttEE' 



d? ^ dE ' 



(2) 



where s;, and Sg are n-bit strings, and ag^s^ are probabil- 
ities. Here we have used the notation 



nf ^' = nf ^ 



)H 



B„B' 

(S6)„ 



where H^^ is the projector onto the symmetric space of 
BB', Hf ^ projects onto the antisymmetric space, sim- 
ilarly for , and and are the ranks of H^-^ 
and , respectively. 

Because of Eq. Q, we can understand Tr(^'X) by fo- 
cusing on a term of the form 



Tr(nf5«Hf5x). 
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This, in turn, is the product of n terms of the form 

Tr (uff (g) UffiPBE ® Pb'E')I Fbb'{Pbe <8) Pb'E')^) , 

which it is easy to verify equals 

Evaluating this sum explicitly gives us 

^^^^ (d^ + {-lyod^ + {-ly-^-d^ + {-ly^+'^d^) 

which, in turn, is no larger than d^{3d+l) /4. As a result, 
we have 



Tr(n, 



BB' 



.nf^'x) < {d^{3d + i)/4:y 



Using this bound in combination with the fact that df^ > 
{d{d — l)/2)" and similarly for df , we find 

(d2(3d+l)/4)" / 3d+l 



Tr(«'X) < 



{d{d ~-i)/2y 



(d-iy 



Finally, we translate this back to a lower bound on the 
average entropy of i?": 

ESipu'^v^) > nlog ((d- l)V(3d+ 1)) , 

which, noting that for d > 9 we have {d— l)^/(3d+ 1) > 
d/4 proves the result. □ 
We now turn to the classical capacity of our channel. 
Because our channels have infinite dimensional classical 
registers, to avoid technical complications we write the 
Holevo quantity for T^"*" together with ensemble £ as 



Now, for any input ensemble {pi, to n copies of our 
channel TZf"', we have 



5* 7^ 




< nlogd. 



Furthermore, by the Lemma, for each the entropy of 
IZu^-v'^i'f^i) averaged over U^V^ is at least 7i(logd — 2). 
As a result, for any ensemble £, we have Ex(7?.c/nyii , £) < 
2n. In light of Eq. ^ this gives C(7^d) < 2. 

Large Joint Quantum Capacity — 

We now show that the joint quantum capacity of a 
random phase coupling channel, TZ^, and a 50% erasure 
channel is at least (1/2) log d. To do this, we will need 
the following lower bound for the quantum capacity |3j 
UnillU], called the coherent information: 

Q{J\f) > max {S{B) - S{ABy , 
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FIG. 2: Reversing random phase coupling with entanglement. 
Using a maximally entangled state, \<j)d)A2B' , the action ol TZd 
on A\ can be reversed. This depends on the fact that for any 
M, M ® I\(f>d) = I ® M'^\4>d), so that by inserting half of 
\4'd)Ar,B' into A2 the receiver holding B and B' can invert 
U ,V and P, the controlled phase operation. By feeding B' 
into a 50% erasure channel, half the time this gives a coherent 
information of logd between sender and receiver. The other 
half of the time the coherent information is exactly zero so 
that the overall coherent information is (1/2) log d. 



where the entropies are evaluated on the state {I®N){(t>). 
In our case, since TZd has infinite dimensional classical 
outputs, the correct lower bound to consider is the coher- 
ent information of the channel given U and V , averaged 
over [/, V . 

The way to use the two channels together is as fol- 
lows. We prepare two maximally entangled states \if) = 
\<t>d) AAi\(t'd) B' A2 and feed A1A2 into TZd and B' into A^- 
The coherent information then breaks up into a sum of 
two terms. The first, which occurs when the input to yl^ 
is not erased (which has probability 1/2) is equal to log d, 
as explained in FIG. [2] The second, which occurs when 
emits an erasure fiag (and also has probability 1/2), is 
the coherent information of a completely dephasing chan- 
nel in a basis known only to the receiver. The resulting 
coherent information in this second case is exactly zero. 
The coherent information of TZd ® A'^ evaluated on | f) is 
just the average of these two, (1/2) log d. Recalling that 
ViTZd) < C{TZd) < 2 and ViA^d) = gives the nonaddi- 
tivity we sought. 

Discussion — We have shown that the quantum and pri- 
vate capacities of a quantum channel are extremely non- 
additive. This nonadditivity illustrates, in contrast to 
the classical theory, that the communication capabilities 
of a quantum channel depend inherently on the setting in 
which it is used. Our construction is essentially a simplifi- 
cation and strengthening of the retrocorrectible channels 
studied in [HIIIJ. As a result, in addition to nonadditiv- 
ity, our channels also provide unconditional separations 
of capacities which were only conjectured in [14j. 
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In particular we can show, contrary to the classical 
case, that the classical capacity of a quantum channel, 
assisted by backwards classical communication, may sub- 
stantially exceed the unassisted capacity. To see this, 
note that if, upon putting halves of maximally entan- 
gled states into TZd, the receiver tells the sender U and 
V, she can easily invert U, V, and P to establish a d- 
dimensional maximally entangled state. In fact, we will 
use two copies of TZd to establish two d-dimensional max- 
imally entangled states. We will use one maximally en- 
tangled state, together with a third copy of the channel 
to simulate a perfect d-dimensional quantum channel as 
explained in FIG|2] The second maximally entangled 
state can be used, together with this perfect channel to 
send 2 log d classical bits by using superdense coding [?T] . 
This results in a back-assisted classical capacity of at 
least 2/3 log d with an unassisted classical capacity of no 
more than 2. 

In terms of magnitude, superadditivity of private 
and quantum capacities cannot exceed log D for chan- 
nels with input dimension D. Our channels achieve 
(1/4) log _D in the limit of large input dimension. We 
suspect this is optimal both because of the simplicity of 
these channels and the structure of all known examples of 
superadditivity. However, we have not yet found a proof. 

While the channels above have finite input dimension, 
as described they have infinite dimensional (indeed, con- 
tinuous) outputs. This is not a serious drawback, be- 
cause our main technical argument (Lemma 1) depends 
only on the fact that a random unitary ensemble is a 
so-called two-design. Luckily, the Clifford group is finite 
and has this property [22^, so that we can replace the 
infinite output above with an output of size 0((logd)^). 

The superactivation effect of |TD] is not yet completely 
understood. From that work it appeared that the fun- 
damental effect was one of transforming noncoherent 
privacy [23] [21] to coherent communication with the as- 
sistance of an erasure channel. However, our results here 
show conclusively that strong superadditivity of this sort 
is possible using channels with almost no private capac- 
ity, and in fact the private classical capacity is just as 
superadditive. What exactly is the source of superaddi- 
tivity and which channels can be activated remain elusive 
open questions. 
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